CVE-2024-31225

Katalog CVE

CVSS 9.0 · Critical EPSS 1,3%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada riot-os riot. Skor CVSS 3.1 9.0 (Critical) menurut NVD.

Deskripsi (NVD)

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The `_on_rd_init()` function does not implement a size check before copying data to the `_result_buf` static buffer. If an attacker can craft a long enough payload, they could cause a buffer overflow. If the unchecked input above is attacker-controlled and crosses a security boundary, the impact of the buffer overflow vulnerability could range from denial of service to arbitrary code execution. This issue has yet to be patched. Users are advised to add manual bounds checking.

Rincian

Terbit di NVD

1 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-2572-7q7c-3965 exploit · advisory vendor
• http://seclists.org/fulldisclosure/2024/May/7 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/05/07/3 mailing list · advisory pihak ketiga
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/cord/lc/cord_lc.c#L218 product